Privacy Policy

1. Data Controller

The controller of your personal data is Patryk Pakuła IT Solution, NIP: 5772002674, REGON: 540031732. Contact us at: contact@zenith-ms.com.

2. Scope and Purpose of Processing

• Login Details: Email address, first name, and last name (retrieved via Google OAuth) to provide and maintain the service.
• Finances & Plans: Data entered by the User (expenses, goals, habits, meal plans) for storage and display within the Application.
• Payment Data: Processed directly by Stripe for subscription management. We do not store your credit card details.

3. GDPR and Your Rights

In accordance with GDPR, you have the right to access your data, rectify it, request deletion, limit processing, and data portability. Please direct any requests to the Data Controller's email address.

4. Data Retention and Deletion

Data is stored for the duration of your account's activity.

The User can delete the account or just the data in the Application settings. More information and the ability to request data deletion can be found at: https://zenith-ms.com/delete-account/

You can delete your account at any time in the Application settings. All data will be permanently erased within a maximum of 14 days from the request.

5. Data Transfer (EEA)

The Controller uses services provided by Google (Firebase, Gemini API) and Stripe. Data may be processed on servers in the USA based on Standard Contractual Clauses and Privacy Framework certification programs, ensuring security in line with EU requirements.

6. Special Features (Camera & AI)

The Application requests camera permission solely for scanning receipts via OCR.

Receipt photos are sent to the Google Gemini API for text recognition. These images are not stored on the Controller's servers.

7. Local Storage and Cookies

The Application uses Local Storage and cookies to maintain user sessions, remember language preferences, and ensure security. Use of the Application is technically impossible without these technologies.

8. Automated Decision-Making

The Application does not use your data for marketing profiling or for automated decision-making that carries legal consequences for the User.